Re: Uhhh someone changed the forum headings on the main page.

So the most likely vulnerability was one in punbb's search form that would allow an attacker to execute some database queries. We've upgraded our punbb install to the latest version which has a fix for this issue, and I've disabled searching for guests. That doesn't totally protect us, but it makes another hack like this more difficult to pull off.